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SYSTEM FOR PREVENTING TAMPERING WITH A SIGNAL CONDITIONER 

REMOTE FROM A HOST SYSTEM 
Field of the Invention 

This invention relates to a signal processing system having a host system that 
provides power to and receives parameter signals from a signal conditioner that 
receives signals from sensors and generates the parameter signals. More particularly, 
this invention relates to a system that prevents tampering with the signal conditioner. 
Still more particularly, this invention relates to a tampering prevention system that is 
executed by the host system which periodically receives and stores authentication 
information from the signal conditioner. 

Problem 

It is common to buy and sell materials in measured quantities. For example, 
gas and oils are often sold in quantities of gallons or barrels. Therefore, it is critical 
that measurements of materials being delivered is accurate. In order to prevent fraud, 
government agencies require that devices measuring the amount of material being 
delivered are tamper proof. Some of these requirements are given in NIST Handbook 
44 (1998 Edition) and OIML R 117 (1995 Edition). 

One type of device used to measure material being delivered is a Coriolis 
Flowmeter. A Coriolis mass flowmeter measures mass flow and other information of 
materials flowing through a pipeline in the manner described by U.S. Patent No. 
4,491,025 issued to J.E. Smith, et al. of January 1, 1985 and Re. 31 ,450 to J. E. Smith 
of February 11, 1982. A Coriolis mass flowmeter has one or more flow tubes of a 
curved or straight configuration. Each flow tube configuration in a Coriolis mass 
flowmeter has a set of natural vibration modes, which may be of a simple bending, 
torsional, radial, or coupled type. Each flow tube is driven to oscillate at resonance 
in one of these natural modes. The natural vibration modes of the vibrating, material 
filled systems are defined in part by the combined mass of the flow tubes and the 
material within the flow tubes. Material flows into the flowmeter from a connected 
pipeline on the inlet side of the flowmeter. The material is then directed through the 
flow tube or flow tubes and exits the flowmeter to a pipeline connected on the outlet 
side. 

A driver applies a vibrational force to the flow tube. The force causes the flow 
tube to oscillate. When there is no material flowing through the flowmeter, all points 
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along a flow tube oscillate with an identical phase. As a material begins to flow 
through the flow tube, Coriolis accelerations cause each point along the flow tube to 
have a different phase with respect to other points along the flow tube. The phase on 
the inlet side of the flow tube lags the driver, while the phase on the outlet side leads 
5 the driver. Sensors are placed at two different points on the flow tube to produce 
sinusoidal signals representative of the motion of the flow tube at the two points. A 
phase difference of the two signals received from the sensors is calculated in units of 
time. The phase difference between the two sensor signals is proportional to the 
mass flow rate of the material flowing through the flow tube or flow tubes. 

1 0 The sensors transmit the sinusoidal signals to a signal conditioner. The signal 

conditioner generates parameter signals that indicate properties of the material flowing 
through the flowmeter. The signal conditioner also generates a drive signal applied 
to the driver to vibrate the flow tubes. The parameter signals are then transmitted to 
a host system which provides the desired properties to a user. 

15 In the past, manufacturers prevented tampering with the signal conditioner in 

the following manner. The signal conditioner has a security switch. The security 
switch prevents others from changing calibration information in the signal conditioner. 
Access to the security switch is prevented by placing the signal conditioner and host 
system in a housing which is sealed. In order to seal the housing, holes are drilled 

20 into opposing sides of the housing. A wire is then threaded through the housing and 
a lead seal is then placed on the wire. This allows for easy visual inspection to 
determine if the electronics have been tampered with. 

However, the use of a seal on the housing is a problem for use in a sanitary 
operation. In a sanitary operation, the entire housing must be easily cleanable. An 

25 example of sanitary operations is the delivery of ingredients in a cooking system. In 
sanitary operation, the holes and seal have crevices and grooves that are hard to 
clean. 

An alternative method of preventing tampering with the signal conditioner is to 
maintain an audit trail of changes in the signal conditioner. This allows for easy 
30 detection of tampering from a readout of the audit. However, the audit trail method 
requires a large amount of non-volatile memory and a real time clock. This adds 
greatly to the expense of each signal conditioner. Therefore, this is not a satisfactory 
solution for providing a tamper proof system. 
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Solution 

The above and other problems are solved and an advance in the art is made 
by a tamper proof signal conditioner in accordance with this invention. A first 
advantage of the tamper proof signal conditioner in accordance with this invention is 
5 that the signal conditioner may be used in a sanitary environment. A second 
advantage is that the signal conditioner does not require additional memory or a real 
time clock in order to provide a tamper proof system. 

In accordance with this invention, the signal conditioner and the host system 
are physically separated. The signal conditioner is circuitry that receives signals from 
10 sensors and converts the signals to parameter signals that indicate properties of a 
material. The host system supplies powers to the signal conditioner and receives the 
parameter signal from the signal conditioner. A conventional 4-wire cable connects 
the host system and signal conditioner to allow the host system to provide power to 
the signal conditioner and to transfer data between one another. 
1 5 The host system is a processing unit that executes applications which provide 

the tamper proof system in accordance with this invention. The signal conditioner 
stores calibration and configuration data as well as a unique identification. For 
purposes of this invention, the signal conditioner may or may not contain a processing 
unit. For purposes of this discussion, the identification, calibration and configuration 
20 data are termed authentication data. 

ost system periodically transmits a request to the signal conditioner for 

\ > the authenticationB§tar--Jjia preferred embodiment, the host system and signal 

conditioner communicate using a^/fddbt*si^protocol or HART™ protocol. The signal 
conditioner receives the request and reads the idenBTicatk^o^ndcalibration data. The 
25 identification and calibration data are then transmitted to the hostsy§tem>^_^ 

The host system stores the received information in a memory to provide an 
audit trail. The host system may also compare the received authentication information 
to initial information stored in the host system. If the authentication data does not 
match the initial information, the host system may generate an error signal. In 
30 response to the error signal, the host system may disable the system. 

[VV—, A first aspect of this invention is a system for preventing tampering with signal 
\\ /conditioning circuitry in electronics that determines a parameter from signals received 
( from sensors ana transmits the parameter to a host system. The host system 
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receives data from and send data to said sigrf&l conditioning circuitry and has a 
processing unit with a connected \mefnory. Processing unit in the host system 
performs instructions stored^rthe memory that periodically transmit a request for 
authentication inform£*it5n to the signal conditioning circuitry, receive the 
authentication infprfnation the said signal conditioning circuitry, and store a record of 
the authentjp^tion information received from said signal conditioning circuitry in the 
memor 

A second aspect of the invention is that the authentication information includes 
a unique identification for the signal conditioning circuitry. 
10 A third aspect of this invention is that the authentication information includes 

jjbration data for the signal conditioning circuitry. 

A fourth aspect of this invention is that the host system compares the 
authentication information with initial information, and signals an error in response to 
s « the authentication information not being equal to said initial information. 

i;0 15 A fifth aspect of this invention is that the host system terminates operation of 

i;a the system in response to the authentication information and initial information not 

: L; being equal. 

A sixth aspect of this invention is that the host system obtains the initial 
12 information. 

rU 20 A seventh aspect of this invention is that the host system obtains the initial 

Q information in the following manner. The host system transmits a initialize request to 

i==l the signal conditioning circuitry for the authentication information in response to 

detecting a signal conditioning circuitry being connected to the host system. The host 
system then receives the authentication information from the signal conditioning 
25 circuitry and 'stores the authentication information as the initial information in said 
memory. 

An eighth aspect of this invention is that the host system compares the 
authentication information received from the signal conditioning circuitry with initial 
information and perform a programmed function in response to the authentication 
30 information not being equal to said initial information. 

In a ninth aspect of this invention the signal conditioning circuitry includes a 
processing unit with a connected memory. The processing unit in the signal 
conditioning circuitry performs instructions to receive the request for the authentication 
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information the host system, to read the authentication information from the memory, 
and to transmit said authentication information to the host system. 

In a tenth aspect of this invention, the record of the authentication information 
includes a time stamp indicating when the authentication information is received. 
5 In an eleventh aspect of this invention the record includes the authentication 

information received from the signal conditioning circuitry. 

Description of the Drawings 
The above and other advantages of this invention are describe in the Detailed 
Description and the following drawings: 
10 FIG. 1 illustrating a block diagram of a host system and a signal conditioner; 

FIG. 2 illustrates an exemplary secondary processing system in a host system; 
FIG. 3 illustrates a process executed by the host system in accordance with this 
invention; 

FIG. 4 illustrating a process executed by the signal conditioner in accordance 
15 with this invention; 

FIG. 5 illustrating a process executed by the host system to initialize the system 
in accordance with this invention; and 

FIG. 6 illustrating a preferred embodiment of this invention in a Coriolis 
flowmeter. 

20 Detailed Description 

The present invention now will be described more fully hereinafter with 
reference to the accompanying drawings, in which embodiments of the invention are 
shown. Those skilled in the art will appreciate that the invention may be embodied in 
many different forms and should not be construed as limited to the embodiments set 

25 forth herein; rather, these embodiments are provided so that this disclosure will be 
thorough and complete, and will fully convey the scope of the invention to those skilled 
in the art. In the drawings, like numbers refer to like elements throughout. 

This invention relates to a system for preventing tampering with a signal 
conditioner. For purposes of this discussion, a signal conditioner is circuitry that 

30 receives signals from sensors and processes the signals to determine a system 
parameter. An example of a system parameter is a property of a material that the 
sensors are detecting. Those skilled in the art will recognize that the sensors may be 
attached to any type of device and that type of device is irrelevant to this invention. 
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In this system, the signal conditioner is enclosed in a housing that can be used 
in sanitary environments. This means the housing is easily cleaned. The signal 
conditioner is connected to a host system that is remote from the signal conditioner 
and in a separate housing. A host system and signal conditioner in accordance with 
this invention are shown below. 

FftSk^l illustrates a block diagram of a host system 1 00 and a signal conditioner 
110 that incor^cate the tamper proof system of this invention. Host system 100 
includes a power suppl}(101 and a processing unit 102. Power supply 101 supplies 
the power needed to proces&iqg unit 102. Power supply 101 also supplies power to 
1 0 signal conditioner 1 1 0 via path 1 03xProcessing unit 1 02 receives parameter signals 
from signal conditioner 110 and provides a parameter to user via path 26 and a 
secondary device. Processing unit 1 02 communicates with signal conditioner 1 1 0 via 
path 1 04 to receive the parameter signals and execute^pplications in accordance with 
this invention. In order to communicate, processing unit 102 and signal conditioner 
15 110 may use any known protocol. Two exemplary protocols are HARP" and Modbus 



Signal conditioner 110 includes a sensor signal conditioner circuitry 112 and 
power converter 113. Sensor signal conditioner circuitry 1 1 2 receives sensor signals 
from sensors via path 114. The sensor signals are then converted by signal 

20 conditioner circuitry 112 into parameter signals. The parameter signals indicate a 
parameter of the system being measured by the sensors. One skilled in the art will 
recognize that sensor signal conditioner circuitry 112 may include a processing unit, 
such as a digital signal processor and the necessary circuitry needed to convert the 
sensor signals into digital signals that are readable by the processing unit. The 

25 parameter signals are then transmitted from signal conditioner circuitry 1 12 to host 
system 100 via path 104. 

Power converter 113 receives power from host system 100. The power may 
then be converted and applied to the system being measured by the sensors or 
applied to the sensors. Power converter 113 also provides power to sensor signal 

30 conditioner circuitry 1 1 2 via path 1 1 6. 

FIG. 2 illustrates an exemplary processing unit 200 which may be used as 
processing unit 102 in host system 100 or as a digital signal processor in signal 
conditioner 1 1 0 of FIG 1 . Processing system 200 has a central processing unit (CPU) 
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201 which executes instructions read from a memory to perform applications that 
comprise the operations of processing system 200. One skilled in the art will 
recognize that CPU 201 may be a microprocessor, processor, or any combination 
grouping multiple processors and microprocessors. CPU 201 is connected to a 
5 memory bus 202. Memory bus 202 allows CPU 201 to access Read Only Memory 
(ROM) 203 and Random Access Memory 204. ROM 203 is a memory that stores 
instructions for performing the basic operative tasks of processing system 200. RAM 
204 is a memory that stores the instructions and data needed to execute applications 
[ thatare performed by processing system 200. 



NAD bus 210 connects CPU 201 to a plurality of peripheral devices. CPU 201 
receives and transmits data to the peripheral devices via I/O bus 210. The peripheral 
devices connected to I/O bus 210 include, but are not limited to, display 220, input 
device 230, netWork interface 240, and non-volatile memory 250. Display 220 is 
connected to I/O bus 210 by path 221 and includes a video driver and connected 



C0 1 5 monitor for displaying information to a user. Input device 230 is connected to I/O bus 
:;5 210 via path 231 and is a keyboard and/or mouse attached to an appropriate driver 
: 1; for receiving input data from a\(ser. Network interface 240 is connected to I/O bus 
210 via path 241 and may by a rnodem, Ethernet device driver, or other type of 
f t communications interface that allows^processing system 200 to communicate with 

^ y 20 another device, such as a second proces&jng system. Non-volatile memory 250 is a 
ri device, such as a disk drive, connected to I/O bus 210 via path 251 and which can 

! J read and write data to a disk or other storage m^dia to store the data for future use. 

Peripheral device 260 is any other device that may bbsconnect to I/O bus 21 0 via path 
261 to share data with CPU 201 . \ 
25 FIG. 3 illustrates a process executed by processing unit 1 02 of host system 1 00 

to provide a tamper proof system in accordance with the present invention. A tamper 
proof system in accordance with this invention stores a record of authentication data 
transmitted to the host system 100 from the signal conditioner 110 to ensure that 
someone does not tamper with signal conditioner 110. The authentication information 
30 is checked periodically to insure against tampering. Periodically means that the 
process may be executed at a set time interval, after a batch of a predetermined 
number of measurements are taken, or at random time intervals. The setting of the 
period is left to those skilled in the art. 
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Process 300 begins in step 301 with processing unit 102 in host system 100 
transmitting a request for authentication information to signal conditioner 110. The 
authentication information may be a unique identification, calibration data, or other 
forms of data that does not change over time. It should be noted that combinations 
5 of these types of data may be used as well. Signal conditioner 110 receives the 
request and performs a process such as the one described below to transmit message 
containing authentication data back to processing unit 102 of host system 100. 

In step 302, processing unit 102 receives the authentication information from 
the signal conditioner 1 1 0. A record of the received authentication information is then 

10 generated and stored in a memory in step 303. This provides an audit trail showing 
that there is no change in the signal conditioner 110. 

After a record is stored, the received authentication information may be 
compared to initial information for the signal conditioner stored in the host system in 
step 304. This initial information may be received from the signal conditioner 1 10 at 

15 the time the system begins operation. Alternatively the initial information may be 
stored in a read only memory prior to operation to assure that the host system only 
operate with one pre-identified signal conditioner 1 10. 

If the initial information matches the received authentication information then 
process 300 ends and waits to execute after the next period elapses. If the initial 

20 information does not match the received authentication information, the processing 
unit 102 may generate a signal indicating possible tampering or other type of error in 
step 306. The processing unit 102 may then cease operation of the system in step 
307. The ceasing of operation prevents any potentially false reading from being used. 
Process 300 then ends. 

25 FIG. 4 illustrates an exemplary process 400 executed by a signal conditioner in 

response to receiving a request for authentication information. Process 400 begins 
in step 401 in which signal conditioner 1 1 0 receives the request from the host system. 
In response to receiving the request, signal conditioner 110 reads the authentication 
information from a memory. Preferably, the memory is a Read Only Memory to 

30 prevent tampering. Alternatively, if signal conditioner 110 contains a processing unit, 
signal conditioner 110 may generate the authentication information using a 
predetermined process executed by the processing unit that will generate an expected 
result. After the authentication information is retrieved, signal conditioner 110 
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generates a message including the authentication information and transmits the 
information to host system 100 in step 403 and process 400 ends. 

Process 500 illustrated in FIG. 5 is an exemplary process executed by 
processing unit 102 in host system 102 to retrieve initial information to executed the 
5 processes in accordance with this invention. Process 500 begins in step 501 with 
processing unit 102 in host system 100 detecting a signal conditioner 1 10 connected 
to host system 100. Processing unit 102 transmits a request for authentication 
information to the signal conditioner 1 10 in step 502. 

The signal conditioner receives the request and transmits authentication 

1 0 information for the signal conditioner 1 1 0 to host system 1 00. Processing unit 1 02 of 
host system 100 receives the authentication information in step 503. The 
authentication is then stored as initial information in step 504 and process 500 ends. 

FIG. 6 illustrates one type of system that may use the tamper proof system in 
accordance with this invention. One skilled in the art will recognize the process in 

1 5 accordance with this invention may be applied to other types of systems to provide a 
tampering prevention system. FIG. 6 shows an exemplary Coriolis flowmeter 5 
comprising a Coriolis flowmeter assembly 10 and meter electronics 20. Meter 
electronics 20 is connected to flowmeter assembly 1 0 via path 600 to provide density, 
mass flow rate, volume flow rate and totalized mass flow information over path 26. 

20 A Coriolis flowmeter structure is described although it should be apparent to those 
skilled in the art that the present invention could be practiced in conjunction with any 
apparatus having a vibrating conduit to measure properties of material flowing through 
the conduit. A second example of such an apparatus is a vibrating tube densitometer 
which does not have the additional measurement capability provided by a Coriolis 

25 mass flowmeters. 

Meter assembly 10 includes a pair of flanges 601 and 601 \ manifold 602 and 
conduits 603A and 603B. Connected to conduits 603A and 603B are driver 604, 
pick-off sensors 605 and 605', and temperature sensor 607. Brace bars 606 and 606' 
serve to define the axis W and W about which each conduit oscillates. 

30 When Coriolis flowmeter 5 is inserted into a pipeline system (not shown) which 

carries the process material that is being measured, material enters flowmeter 
assembly 10 through flange 601 , passes through manifold 602 where the material is 
directed to enter conduits 603A and 603B, flows through conduits 603A and 603B and 
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back into manifold 602 from where it exits meter assembly 10 through flange 601'. 

Conduits 603A and 603B are selected and appropriately mounted to the 
manifold 602 so as to have substantially the same mass distribution, moments of 
inertia and elastic modules about bending axes W-W and W'-W, respectively. The 
5 conduits 603A-603B extend outwardly from the manifold in an essentially parallel 
fashion. 

Conduits 603A-603B are driven by driver 604 in opposite directions about their 
respective bending axes W and W and at what is termed the first out of phase 
bending mode of the flowmeter. Driver 604 may comprise any one of many well 

10 known arrangements, such as a magnet mounted to conduit 603A and an opposing 
coil mounted to conduit 603B and through which an alternating current is passed for 
vibrating both conduits. A suitable drive signal is applied by meter electronics 20 to 
driver 604 via path 610. 

Pick-off sensors 605 and 605' are affixed to at least one of conduits 603 A and 

15 603B on opposing ends of the conduit to measure oscillation of the conduits. As the 
conduit 603A-603B vibrates, pick-off sensors 605-605' generate a first pick-off signal 
and a second pick-off signal. The first and second pick-off signals are applied to 
paths 61 1 and 61 1' prime. The driver velocity signal is applied to path 610. 

Temperature sensor 607 is affixed to at least one conduit 603A and/or 603B. 

20 Temperature sensor 607 measures the temperature of the conduit in order to modify 
equations for the temperature of the system. Path 612 carries temperature signals 
from temperature sensor 107 to meter electronics 20. 

Meter electronics 20 receives the first and second pick-off signals appearing on 
paths 61 1 and 61 1 \ respectively. Meter electronics 20 processes the first and second 

25 velocity signals to compute the mass flow rate, the density, or other property of the 
material passing through flowmeter assembly 10. This computed information is 
applied by meter electronics 20 over path 26 to a utilization means (not shown). 

It is known to those skilled in the art that Coriolis flowmeter 5 is quite similar in 
structure to a vibrating tube densitometer. Vibrating tube densitometers also utilize 

30 a vibrating tube through which fluid flows or, in the case of a sample-type 
densitometer, within which fluid is held. Vibrating tube densitometers also employ a 
drive system for exciting the conduit to vibrate. Vibrating tube densitometers typically 
utilize only single feedback signal since a density measurement requires only the 
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measurement of frequency and a phase measurement is not necessary. The 
descriptions of the present invention herein apply equally to vibrating tube 
densitometers. 

In this invention, the meter electronics 20 are physically divided into 2 
5 components a host system 700 and a signal conditioner 701 . In conventional meter 
electronics, these components are housed in one unit. 

Signal conditioner 701 includes drive circuitry 710 and pick-off conditioning 
circuitry 720. One skilled in the art will recognize that in actuality drive circuitry 710 
and pick-off conditioning circuitry 720 may be separate analog circuits or may be 

1 0 separate functions provided by a digital signal processor or other digital components. 
Drive circuitry 710 generates a drive signal and applies the drive signal to driver 604 
via path 710 of path 600. In actuality, path 1 10 is a first and a second lead. Drive 
circuitry 71 0 is communicatively connected to pick-off signal conditioning circuitry 720 
via path 713. Path 713 allows drive circuitry to monitor the incoming pick-off signals 

15 to adjust the drive signal. Power to operate drive circuitry 710 and pick-off signal 
conditioning circuitry 720 is supplied from host system 700 via a first wire 71 1 and a 
second wire 712. First wire 71 1 and second wire 712 may be a part of a conventional 
2-wire, 4-wire cable, or a portion of a multi-pair cable. 

Pick-off signal conditioning circuitry 720 receives input signals from first pick-off 

20 605, second pick-off 605', and temperature sensor 607 via paths 611,611' and 612. 
Pick-off circuitry 720 determines the frequency of the pick-off signals and may also 
determine properties of a material flowing through conduits 603A-603B. After the 
frequency of the input signals from pick-off sensors 605-605' and properties of the 
material are determined, parameter signals carrying this information are generated 

25 and transmitted to a secondary processing unit 750 in host system 700 via path 721 . 
In a preferred embodiment, path 721 includes 2 leads. However, one skilled in the art 
will recognize that path 721 may be carried over first wire 71 1 and second wire 71 2 
or over any other number of wires. 

Host system 700 includes a power supply 730 and processing system 750. 

30 Power supply 730 receives electricity from a source and converts the received 
electricity to the proper power needed by the system. Processing system 750 
receives the parameter signals from pick-off signal conditioning circuitry 720 and then 
may perform processes needed to provide properties of the material flowing through 
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conduits 603A-603B needed by a user. Such properties may include but are not 
limited to density, mass flow rate, and volumetric flow rate. Processing system 750 
performs the processes shown in FIGS. 3 and 5 to provide a tamper prevention 
system in accordance with the present invention. 

The above description provides an exemplary embodiment of the tampering 
prevention system in accordance with this invention. It is expected that those skilled 
in the art can and will design alternative embodiments that infringe on this invention 
as set forth in the claims below either literally or through the Doctrine of Equivalents. 
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